Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/OyOdBEq3McKOzrdWvAy_xf-n1Xw.roa
File: OyOdBEq3McKOzrdWvAy_xf-n1Xw.roa (raw, json)
Hash identifier: wRezvIDWJMb8B/e95FBx49oI5x5vEI+9igqiNn0BXrc=
Subject key identifier: 3B:23:9D:04:4A:B7:31:C2:8E:CE:B7:56:BC:0C:BF:C5:FF:A7:D5:7C
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182AC8DA3984F106E3B1E97CA981EE323C2
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/OyOdBEq3McKOzrdWvAy_xf-n1Xw.roa
Signing time: Wed 17 Aug 2022 16:05:39 +0000
ROA not before: Wed 17 Aug 2022 16:05:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203333
IP address blocks: 2a06:a005:1860::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ac:8d:a3:98:4f:10:6e:3b:1e:97:ca:98:1e:e3:23:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 17 16:05:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b239d044ab731c28eceb756bc0cbfc5ffa7d57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9a:42:37:4d:a7:0c:1e:f7:2b:e5:d3:ac:ba:
3c:f6:c7:56:a2:55:20:f6:15:ec:cc:9b:cb:50:2c:
7a:a9:5e:50:21:fc:69:c9:61:3d:96:64:cf:01:db:
1b:b6:95:4b:8c:65:db:47:e2:b0:ed:51:96:4f:57:
f0:ad:0e:3a:23:84:30:4c:d0:73:6f:ab:e6:60:16:
e4:9f:5d:8a:c2:c1:67:d9:8f:30:03:3b:b7:8f:b0:
f7:ed:06:59:6b:17:cc:78:3b:dc:87:a1:fd:ee:7e:
0c:20:1a:bc:6c:97:88:39:9e:7f:d2:6b:a7:37:9e:
74:9d:af:35:1e:15:59:25:05:82:d9:45:e1:76:ae:
dd:8a:f6:69:ba:fa:f7:14:7e:70:51:cc:87:93:b3:
39:60:11:4f:72:9b:3d:85:4e:df:fe:7d:c1:9e:d3:
ad:00:73:11:04:6f:6d:41:55:b5:bd:66:aa:f2:02:
64:67:d1:02:6d:08:f0:bf:08:3a:c4:60:c1:9a:e0:
0a:c0:f5:9c:07:02:53:4c:b5:14:74:a2:53:5e:6b:
bf:d6:10:10:20:62:7c:7a:b8:6e:72:49:76:70:12:
e5:0f:7a:a5:23:ad:8b:72:f5:a9:11:e6:ba:50:86:
95:0d:e9:62:7b:23:08:97:1e:85:7b:32:da:ec:d7:
15:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:23:9D:04:4A:B7:31:C2:8E:CE:B7:56:BC:0C:BF:C5:FF:A7:D5:7C
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/OyOdBEq3McKOzrdWvAy_xf-n1Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1860::/44
Signature Algorithm: sha256WithRSAEncryption
63:56:81:ba:93:78:ef:f5:6f:f5:2e:8e:ac:1f:3d:b0:f7:f4:
3d:25:12:b2:1d:38:8b:62:7b:34:13:5d:83:f2:52:80:c0:21:
2f:b1:c6:b4:95:5f:1e:b0:f4:5c:2d:f4:ce:9e:01:67:c2:f5:
81:4d:f6:fa:19:ee:28:6d:04:bb:f5:c1:1a:80:49:f9:bd:89:
31:49:50:2c:af:4a:6d:6d:77:f7:d6:94:27:8e:2f:7a:ce:41:
b5:2d:15:cf:f8:17:2e:bc:d9:2f:8c:19:1f:ce:43:98:e8:d3:
0f:8d:54:e3:6d:c9:15:44:c9:03:ae:aa:15:04:84:7e:80:64:
ca:d9:46:a0:d5:79:b3:b5:1f:fd:02:a0:fc:21:82:d2:80:52:
d1:5c:8e:2d:de:ce:79:9f:08:e3:df:a2:7c:5b:0f:f5:bf:39:
05:61:ab:31:72:34:ea:4f:d8:da:97:c5:fb:d0:c9:8f:c7:ae:
92:06:11:ff:49:5f:6d:06:df:6d:43:d1:a9:71:08:6f:17:20:
a9:3d:bc:58:cb:d4:0b:13:05:3a:48:4c:6f:aa:a7:dd:b6:1e:
14:6c:69:1e:f9:ed:82:50:03:fa:97:5b:64:c0:53:d7:36:76:
49:61:8a:68:1c:49:16:ca:38:83:9e:ee:4a:7d:81:22:82:73:
b3:83:05:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:45:02 2025 by rpki-client